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FEATURES: 


e Organized as 512K x8/1M x8 
* Conforms to Intel® LPC Interface Specification v1.1 


— Support Multi-Byte Firmware Memory Read/ 
Write Cycles 


e Single 3.0-3.6V Read and Write Operations 
e LPC Mode 


5-signal LPC bus interface for both in-system 
and factory programming using programmer 
equipment 
— Multi-Byte Read capability allowing 15.6 MB/s 
data transfer rate @ 33 MHz PCI clock 
- Firmware Memory Read cycle supporting 
1,2, 4, 16, and 128 Byte Read 
- Firmware Memory Write cycle supporting 
1, 2, and 4 Byte Write 
— 33 MHz clock frequency operation 
— WP#/AAI and TBL# pins provide hardware Write 
protect for entire chip and/or top Boot Block 
— Block Locking Registers for individual block Read- 
Lock, Write-Lock, and Lock-Down protection 
— 5 GPI pins for system design flexibility 
— 41D pins for multi-chip selection 
— Multi-Byte capability registers 
(read-only registers) 
— Status register for End-of-Write detection 
— Program-/Erase-Suspend 
Read or Write to other blocks during 
Program-/Erase-Suspend 
¢ Two-cycle Command Set 
e Security ID Feature 
— 256-bit Secure ID space 
- 64-bit Unique Factory Pre-programmed 
Device Identifier 
- 192-bit User-Programmable OTP 
e Low Power Consumption 


— Active Read Current: 12 mA (typical) 
- Standby Current: 10 pA (typical) 


PRODUCT DESCRIPTION 


The SST49LFOOxC flash memory devices are designed to 
interface with host controllers (chipsets) that support a low- 
pin-count (LPC) interface for system firmware applications. 
The SST49LFOOxC device complies with Intel’s LPC Inter- 
face Specification 1.1, supporting a Burst-Read (up to 128 
bytes in a single operation) which enables a 15.6 MByte 
per second data transfer. The LPC interface operates with 
5 signal pins versus 28 pins of a 8-bit parallel flash memory. 
This frees up pins on the ASIC host controller resulting in 
lower ASIC costs and a reduction in overall system costs 
due to simplified signal routing. 
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e Protected Data Area 
— 12-KByte Protected Data Area space 
— Three 4-KByte User-Programmable flash mem- 
ory sectors 
— Read-lock, write-lock and lock-down protection 
for each sector 
¢ Superior Reliability 
— Endurance: 100,000 Cycles (typical) 
— Greater than 100 years Data Retention 
e Uniform 4 KByte sectors 
— SST49LFO04C: 11 Overlay Blocks: 
- one 16-KByte Boot Block 
- two 8-KByte Parameter Blocks 
- one 32-Kbyte Parameter Block 
- seven 64-KByte Main Blocks 
— SST49LFO08C: 19 Overlay Blocks: 
- one 16-KByte Boot Block 
- two 8-KByte Parameter Blocks 
- one 32-Kbyte Parameter Block 
- 15 64-KByte Main Blocks 
¢ Fast Sector-Erase/Program Operation 
— Sector-Erase Time: 18 ms (typical) 
— Block-Erase Time: 18 ms (typical) 
— Program Time: 7 us (typical) 
e Auto Address Increment (AAI) for Rapid Factory 
Programming (High Voltage Enabled) 
— RY/BY# pin for End-of-Write detection 
— Multi-Byte Program 
— Chip Rewrite Time: (typical) 
- SST49LFO04C: 1 seconds 
- SST49LFO08C: 2 seconds 
e Packages Available 


— 32-lead PLCC 
— 32-lead TSOP (8mm x 14mm) 


¢ All non-Pb (lead-free) devices are ROHS compliant 


The SST49LFOOxC use a 5-signal LPC interface to support 
both in-system and rapid factory programming using pro- 
grammer equipment. A high voltage pin (WP#/AAI) is used 
to enable Auto Address Increment (AAI) mode. The 
SST49LFOOxC offers hardware block protection in addition 
to individual block protection via software registers for criti- 
cal system code and data. A 256-bit Security ID space with 
a 64-bit factory pre-programmed unique number and a 
192-bit user programmable OTP area as well as 12-KByte 
Protected Data Area (PDA) enhances the user's ability to 
implement new security techniques and data protection 
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scheme. The PDA can be also used to store system con- 
figuration data (EEPROM _ replacement). The 
SST49LFOOxC also provides general purpose inputs (GPI) 
for system design flexibility. 


The SST49LFOOxC flash memory device is manufactured 
with SST’s proprietary, high-performance SuperFlash tech- 
nology. The split-gate cell design and thick-oxide tunneling 
injector attain greater reliability and manufacturability com- 
pared with alternative technology approaches. The 
SST49LFOOxC device significantly improves performance 
and reliability, while lowering power consumption. The 
SST49LFOOxC device writes (Program or Erase) in-system 
with a single 3.0-3.6V power supply. It uses less energy 
during Erase and Program than alternative flash memory 
technologies. 


The total energy consumed is a function of the applied volt- 
age, current and time of application. Since for any given 
voltage range, the SuperFlash technology uses less cur- 
rent to program and has a shorter erase time, the total 
energy consumed during any Erase or Program operation 
is less than alternative flash memory technologies. 


The SuperFlash technology provides fixed Erase and Pro- 
gram time, independent of the number of Erase/Program 
cycles that have performed. Therefore the system software 
or hardware does not have to be calibrated or correlated to 
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the cumulative number of erase cycles as is necessary with 
alternative flash memory technologies, whose Erase and 
Program time increase with accumulated Erase/Program 
cycles. To protect against inadvertent write, the 
SST49LFOOxC device has on-chip hardware and software 
write protection schemes. It is offered with a typical endur- 
ance of 100,000 cycles. Data retention is rated at greater 
than 100 years. 


The SST49LFOOxC product provides a maximum program 
time of 10 us per byte with a single-byte Program opera- 
tion; effectively 5 us per byte with a dual-byte Program 
operation and 2.5 us per byte with a quad-byte Program 
operation. End-of-Write can be detected by the RY/BY# pin 
output in AAI mode and by reading the software status reg- 
ister during an in-system Program or Erase operation. 


The SST49LFOOxC is offered in 32-PLCC, and 32-TSOP 
packages. In addition, the SST49LFOOxC devices are 
offered in lead-free (non-Pb) package options to address 
the growing need for non-Pb solutions in electronic compo- 
nents. Non-Pb package versions can be obtained by order- 
ing products with a package code suffix of “E” as the 
environmental attribute in the product part number. See 
Figures 3 and 4 for pin assignments and Table 1 for pin 
descriptions. 
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FIGURE 3: PIN ASSIGNMENTS FOR 32-LEAD PLCC 
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PIN DESCRIPTIONS 


TABLE 1: PIN DESCRIPTION 




































































Interface 

Symbol | Pin Name Type’ | AAI | LPC | Functions 

LCLK Clock | X X | To accept a clock input from the control unit 

LAD[3:0] | Address /O X X | To provide LPC bus information, 

and Data such as addresses and command Inputs/Outputs data. 

LFRAME#| Frame I X X | To indicate the start of a data transfer operation; 
also used to abort an LPC cycle in progress. 

RST# Reset | X X_ | To reset the operation of the device 

INIT# Initialize | Xx X | This is the second reset pin for in-system use. 

This pin is internally combined with the RST# pin. 
If this pin or RST# pin is driven low, identical operation is exhibited. 

ID[3:0] Identification I X X_ | These four pins are part of the mechanism that allows multiple parts to be 

Inputs attached to the same bus. The strapping of these pins is used to identify 
the component. The boot device must have ID[3:0]=0000, all subsequent 
devices should use sequential up-count strapping. These pins are inter- 
nally pulled-down with a resistor between 20-100 KQ. When in AAI mode, 
these pins operate identically as in Firmware Memory cycles. 

GPI[4:0] | General X | These individual inputs can be used for additional board flexibility. 

Purpose The state of these pins can be read through LPC registers. These inputs 

Inputs should be at their desired state before the start of the LPC clock cycle dur- 
ing which the read is attempted, and should remain in place until the end 
of the Read cycle. Unused GPI pins must not be floated. 

GPI[2:4] are ignored when in AAI mode. 

TBL# Top Block Lock I X_ | When low, prevents programming to the boot block sectors at top of device 
memory. When TBL+# is high it disables hardware write protection for the 
top block sectors. This pin cannot be left unconnected. 

TBL# setting is ignored when in AAI mode. 

WP#/AAI | Write Protect I X_ | When low, prevents programming to all but the highest addressable block 
(Boot Block). When WP# is high it disables hardware write protection for 
these blocks. This pin cannot be left unconnected. 

WP#/AAI | AAI Enable I X When set to the Supervoltage Vy = 9V, configures the device to program 
multiple bytes in AAl mode. When brought to Vj_/Vin, returns device to 
LPC mode. 

RY/BY# Ready/Busy# O X Open drain output that indicates the device is ready to accept data in an 
AAI mode, or that the internal cycle is complete. 

Used in conjunction with LD# pin to switch between these two flag states. 

LD# Load-Enable# I X Input pin which when low, indicates the host is loading data in an AAI pro- 
gramming cycle. If LD# is high, the host signals the AAI interface that it is 
terminating a command. LD# low/high switches the RY/BY# output from a 
“buffer free” flag to a “programming complete” flag. 

Vpp Power Supply PWR | X X_ | To provide power supply (3.0-3.6V) 

Vss Ground PWR | X X | Circuit ground (OV reference) 

NC No Connection N/A | N/A | Unconnected pins. 











1. l=Input, O=Output 
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Clock 
The LCLK pin accepts a clock input from the host controller. 


Input/Output Communications 


The LADJ[3:0] pins are used to serially communicate cycle 
information such as cycle type, cycle direction, ID selection, 
address, data, and sync fields. 


Input Communication Frame 


The LFRAME# pin is used to indicate start of a LPC bus 
cycle. The pin is also used to abort an LPC bus cycle in 
progress. 


Reset 


A Vic on INIT# or RST# pin initiates a device reset. INIT# 
and RST# pins have the same function internally. It is 
required to drive INIT# or RST# pins low during a system 
reset to ensure proper CPU initialization. During a Read 
operation, driving INIT# or RST# pins low deselects the 
device and places the output drivers, LAD[3:0], in a high 
impedance state. The reset signal must be held low for a 
minimum of time Taste A reset latency occurs if a reset pro- 
cedure is performed during a Program or Erase operation. 
See Table 26, Reset Timing Parameters, for more informa- 
tion. A device reset during an active Program or Erase oper- 
ation will abort the operation and memory contents may 
become invalid due to data being altered or corrupted from 
an incomplete Erase or Program operation. 


Identification Inputs 


These pins are part of a mechanism that allows multiple 
devices to be attached to the same bus. The strapping of 
these pins is used to identify the component. The boot 
device must have ID[3:0] = 0; all subsequent devices 
should use sequential count-up strapping. These pins are 
internally pulled-down with a resistor between 20-100 KQ. 


General Purpose Inputs 


The General Purpose Inputs (GPI[4:0]) can be used as dig- 
ital inputs for the CPU to read. The GPI register holds the 
values on these pins. The data on the GPI pins must be 
stable before the start of a GPI register Read and remain 
stable until the Read cycle is complete. The pins must be 
driven low, Vi, or high, Viy but not left unconnected (float). 
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Write Protect / Top Block Lock 


The Top Boot Lock (TBL#) and Write Protect (WP#/AAI) 
pins are provided for hardware write protection of device 
memory in the SST49LFOOxC. The TBL# pin is used to 
write protect 16 KByte at the highest memory address 
range for the SST49LFOOxC. WP#/AAI pin write protects 
the remaining sectors in the flash memory. An active low 
signal at the TBL# pin prevents Program and Erase opera- 
tions of the top Boot Block. When TBL# pin is held high, 
write protection of the top Boot Block is then determined by 
the Boot Block Locking registers. The WP#/AAI pin serves 
the same function for the remaining sectors of the device 
memory. The TBL# and WP#/AAI pins write protection 
functions operate independently of one another. Both TBL# 
and WP#/AAI pins must be set to their required protection 
states prior to starting a Program or Erase operation. A 
logic level change occurring at the TBL# or WP#/AAI pin 
during a Program or Erase operation could cause unpre- 
dictable results. TBL# and WP#/AAI pins cannot be left 
unconnected. 


TBL+# is internally OR’ed with the top Boot Block Locking 
register. When TBL# is low, the top Boot Block is hardware 
write protected regardless of the state of the Write-Lock bit 
for the Boot Block Locking register. Clearing the Write-Pro- 
tect bit in the register when TBL# is low will have no func- 
tional effect, even though the register may indicate that the 
block is no longer locked. 


WP#/AAI is internally OR’ed with the Block Locking regis- 
ter. When WP#/AAI is low, the blocks are hardware write 
protected regardless of the state of the Write-Lock bit for 
the corresponding Block Locking registers. Clearing the 
Write-Protect bit in any register when WP#/AAI is low will 
have no functional effect, even though the register may indi- 
cate that the block is no longer locked. 


The TBL# pin and WP# pin do not affect the protection of 
the Protected Data Area. The PDA protection status is only 
determined by the value of the PDA Sector Locking Regis- 
ters. (See “Block and PDA Sector Locking Registers” on 
page 22.) 


AAI Enable 


The AAI Enable pin (WP#/AAI) is used to enable the Auto 
Address Increment (AAI) mode. When the WP#/AAI pin is 
set to the Supervoltage Vy (9+0.5V), the device is in AAI 
mode with Multi-Byte programming. When the WP#/AAI 
pin is brought to ViL/Vin levels, the device returns to LPC 
mode. 
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Ready/Busy 


The Ready/Busy pin (RY/BY#), is an open drain output 
which indicates the device is ready to accept data in an AAI 
mode, or that the internal programming cycle is complete. 
The pin is used in conjunction with the LD# pin to switch 
between these two flag states (see Table 19). 


Load Enable 


The Load Enable pin (LD#), is an input pin which when low, 
indicates the host is loading data in an AAI programming 
cycle. Data is loaded in the SST49LFOOxC at the rising 
edge of the clock. If LD# is high, it signals the AAI interface 
that the host is terminating the command. LD# low/high 
switches the RY/BY# output from buffer free flag to pro- 
gramming complete flag (see Table 19). 


No Connection (NC) 
These pins are not connected internally. 


DESIGN CONSIDERATIONS 


SST recommends a high frequency 0.1 uF ceramic capac- 
itor to be placed as close as possible between Vpp and 
Vss less than 1 cm away from the Vpp pin of the device. 
Additionally, a low frequency 4.7 UF electrolytic capacitor 
from Vpp to Vss should be placed within 1 cm of the Vpp 
pin. If you use a socket for programming purposes add an 
additional 1-10 uF next to each socket. The RST# pin must 
remain stable at Viy for the entire duration of an Erase 
operation. WP#/AAI must remain stable at V\q for the entire 
duration of the Erase and Program operations for non-Boot 
Block sectors. To write data to the top Boot Block sectors, 
the TBL# pin must also remain stable at Viy for the entire 
duration of the Erase and Program operations. 


MODE SELECTION 


The SST49LFOOxC flash memory device operates in two 
distinct interface modes: the LPC mode and the Auto 
Address Increment (AAI) mode. The WP#/AAI pin is used 
to set the interface mode selection. The device is in AAI 
mode when the WP#/AAI pin is set to the Supervoltage Vy 
(9+0.5V), and in the LPC mode when the WP#/AAI is set to 
Vi/Vin. The mode selection must be configured prior to 
device operation. 
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LPC MODE 


Device Operation 


The SST49LFOOxC supports Multi-Byte Firmware Memory 
Read and Write cycle types as defined in Intel Low Pin 
Count Interface Specification, Revision 1.1. Table 2 shows 
the size of transfer supported by the SST49LFOOxC. 


TABLE 2: TRANSFER SIZE SUPPORTED 





Size of Transfer 
1, 2,4, 16, 128 Bytes 


Cycle Type 
Firmware Memory Read 

















Firmware Memory Write 1, 2, 4 Bytes 
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The LPC mode uses a 5-signal communication interface: 
one control line, LFRAME#, which is driven by the host to 
start or abort a bus cycle, a 4-bit data bus, LAD[3:0], used 
to communicate cycle type, cycle direction, ID selection, 
address, data and sync fields. The device enters standby 
mode when LFRAME+# is taken high and no internal opera- 
tion is in progress. 


The host drives LFRAME# signal from low-to-high to cap- 
ture the start field of a LPC cycle. On the cycle in which 
LFRAME# goes inactive, the last latched value is taken as 
the START value. The START value determines whether 
the SST49LFOOxC will respond to a Firmware Memory 
Read/Write cycle type as defined in Table 3. 


TABLE 3: FIRMWARE Memory CycLes START 
FIELD DEFINITION 





START 
Value | Definition 





1101 Start of a Firmware Memory Read cycle 














1110 | Start of a Firmware Memory Write cycle 
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See following sections on details of Firmware Memory 
cycle types (Tables 4 and 5). Two-cycle Program and 
Erase command sequences are used to initiate Firmware 
Memory Program and Erase operations. See Table 8 for a 
listing of Program and Erase commands. 
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Advance Information 





FIRMWARE MEMORY CYCLES 


Firmware Memory Read Cycle 


TABLE 4: FIRMWARE MEmoRY READ CYCLE FIELD DEFINITIONS 








Clock Field Field Contents LAD[3:0] 
Cycle Name LAD[3:0]' Direction | Comments 
1 START 1101 IN LFRAME# must be active (low) for the part to respond. 


Only the last start field (before LFRAME# transitions high) 
will be recognized. The START field contents (1101b) indi- 
cate a Firmware Memory Read cycle. 


2 IDSEL 0000 to 1111 IN Indicates which SST49LFOOxC device should respond. 
If the IDSEL (ID select) field matches the value of ID[3:0], 
then that particular device will respond to the LPC bus 
cycle. 


3-9 MADDR YYYY IN These seven clock cycles make up the 28-bit memory 
address. YYYY is one nibble of the entire address. 
Addresses are transferred most-significant nibble first. 


10 MSIZE KKKK IN The MSIZE field indicates how many bytes will be trans- 
ferred during multi-byte operations. 

Device will execute multi-byte read of 2MSIZE bytes. 
SST49LFOOxC supports only MSIZE = 0, 1, 2, 4, 7 (1, 2, 4, 
16, 128 Bytes), with KKKK=0000b, 0001b, 0010b, 0100b, or 
0111b. 


11 TARO 1111 IN, In this clock cycle, the master (Intel ICH) has driven the bus 
then Float | to all ‘1’s and then floats the bus, prior to the next clock 
cycle. This is the first part of the bus “turnaround cycle.” 




















12 TAR1 1111 (float) Float, The SST49LFOOxC takes control of the bus during this 
then OUT _ | cycle. 
13 RSYNC 0000 (READY) OUT During this clock cycle, the device generates a “ready sync” 


(RSYNC) indicating that the device has received the input 
data. The least-significant nibble of the least-significant byte 
will be available during the next clock cycle. 








14-A DATA ZZZZ OUT A=(13+2"1): n = MSIZE 
Least significant nibbles outputs first. 
(A+1) TARO 1111 OUT, In this clock cycle, the SST49LFOOxC drives the bus to all 


then Float | ones and then floats the bus prior to the next clock cycle. 
This is the first part of the bus “turnaround cycle.” 
A=(13+2"1); n = MSIZE 


(A+2) TAR1 1111 (float) Float, The host resumes control of the bus during this cycle. 
then IN A=(13+2"1): n = MSIZE 
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1. Field contents are valid on the rising edge of the present clock cycle. 





cok TLFU LU UU UU UU UU UU UTS U UU 





i i 
1 1 
LFRAME# } 


! 
I 1 
Start IDSEL |—-_——————- MADDR —1—__—_ size TARD TAR RSYNC | para ——_—__|_! 
ST: 
Lapray (in (ee (rd eva) a (ee nl aa” — Ya) ra 
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FIGURE 5: FIRMWARE Memory READ CYCLE WAVEFORM 
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Firmware Memory Write Cycle 


TABLE 5: FIRMWARE MEMORY WRITE CYCLE 





Clock 
Cycle 


Field 
Name 


Field Contents 
LAD[3:0]! 


LAD[3:0] 
Direction 


Comments 





1 


START 


1110 


IN 


LFRAME# must be active (low) for the part to respond. 
Only the last start field (before LFRAME# transitions 
high) will be recognized. The START field contents 
(1110b) indicate a Firmware Memory Write cycle. 





IDSEL 


0000 to 1111 


Indicates which SST49LFOOxC device should 
respond. If the IDSEL (ID select) field matches the 
value of ID[3:0], then that particular device will respond 
to the whole bus cycle. 





MADDR 


YYYY 


These seven clock cycles make up the 28-bit memory 
address. YYYY is one nibble of the entire address. 
Addresses are transferred most-significant nibble first. 





10 


MSIZE 


KKKK 


The MSIZE field indicates how many bytes will be 
transferred during multi-byte operations. 

Device supports 1, 2, and 4 Bytes write with MSIZE = 
0, 1, or 2, and KKKK=0000b, 0001b, or 0010b. 





DATA 


ZZZZ 


IN 


A=(10+2""): n = MSIZE 
Least significant nibble entered first. 





TARO 


1111 


IN then Float 


In this clock cycle, the master (Intel ICH) has driven the 
bus to all ‘1’s and then floats the bus prior to the next 
clock cycle. This is the first part of the bus “turnaround 
cycle.” A=(10+2"*1); n = MSIZE 





(A+2) 


TAR1 


1111 (float) 


Float then OUT 


The SST49LFOOxC takes control of the bus during this 
cycle. 
A=(10+2"1): n = MSIZE 





(A+3) 


RSYNC 


0000 


OUT 


During this clock cycle, the SST49LFOOxC generates 
a “ready sync” (RSYNC) and outputs the values 0000, 
indicating that it has received data or a flash command. 
A=(10+2"1); n = MSIZE 





(A+4) 


TARO 


1111 


OUT then Float 


In this clock cycle, the SST49LFOOxC drives the bus to 
all ‘1’s and then floats the bus prior to the next clock 
cycle. This is the first part of the bus “turnaround 
cycle”. A=(10+2"*1); n = MSIZE 





(A+5) 








TAR1 





1111 (float) 





Float then IN 





The host resumes control of the bus during this cycle. 
A=(10+2"1): n = MSIZE 








1. Field contents are valid on the rising edge of the present clock cycle. 
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LAD[3:0] 





H 1 
1 H 1 
Start IDSEL /}___——. appbk. —--___| size J} + para Tao TAR1 rsync} 
S 

Al11:8] X A[7:4] X A[3:0] X KKKKb X Do[3:0] X Dol?:4) 
tA XM RAKE DBO) D4) 


(veo) 
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FIGURE 6: FIRMWARE MEmMorY WRITE CYCLE WAVEFORM 
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Abort Mechanism 


If LFRAME# is driven low for one or more clock cycles after 
the start of a bus cycle, the cycle will be terminated. The 
host may drive the LAD[3:0] with ‘1111b’ (ABORT nibble) to 
return the interface to ready mode. The ABORT only 
affects the current bus cycle. For a multi-cycle command 
sequence, such as the Erase or Program commands, 
ABORT doesn’t interrupt the entire command sequence, 
only the current bus cycle of the command sequence. The 
host can re-send the bus cycle for the aborted command 
and continue the command sequence after the device is 
ready again. 


Response to Invalid Fields for 
Firmware Memory Cycle 


During an on-going Firmware Memory bus cycle, the 
SST49LFOOxC will not explicitly indicate that it has received 
invalid field sequences. The response to specific invalid 
fields or sequences is described as follows: 


ID mismatch: If the IDSEL field does not match ID[3:0], 
the device will ignore the cycle. See “Multiple Device Selec- 
tion for Firmware Memory Cycle” on page 16 for details. 


Address out of range: The address sequence is 7 
fields long (28 bits) with Firmware Memory bus cycles. 
Only some of the address fields bits are decoded by the 
SST49LFOOxC devices. SST49LFO004c decodes Ao 
through Aig and Azo and SST49LFOO8C decodes Ao 
through Aig and Age. Address Age has the special function 
of directing reads and writes to the flash core (Az2=1) or to 
the register space (Az2=0). 
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Invalid MSIZE field: If the SST49LFOOxC receives an 
invalid size field during a Firmware Memory Read or Write 
operation, the device will reset and no operation will be 
attempted. The device will not generate any kind of 
response in this situation. The SST49LFOOxC will only 
respond to values listed in Table 6. 


TABLE 6: VALID MSIZE FIELD VALUES FOR 
FIRMWARE Memory CYCLES 


























MSIZE Direction Size of Transfer 
0000 R/W 1 Byte 

0001 R/W 2 Byte 

0010 R/W 4 Byte 

0100 R 16 Byte 

0111 R 128 Byte 
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Once valid START, IDSEL, and MSIZE are received, the 
SST49LFOOxC will always complete the bus cycle. How- 
ever, if the device is busy performing a flash Erase or Pro- 
gram operation, no new internal memory Write will be 
executed. As long as the states of LAD[3:0] and LFRAME# 
are known, the response of the ST49LFOOxC to signals 
received during the cycle is predictable. 


Non-boundary-aligned address: The SST49LFOOxC 
accepts multi-byte transfers for both Read and Write opera- 
tions. The device address space is divided into uniform 
page sizes 2, 4, 16, or 128 bytes wide, according to the 
MSIZE value (see Table 6). The host issues only one 
address in the MADDR field of the Firmware Memory 
Cycle, but multiple bytes are read from or written to the 
device. For this reason the MADDR address should be 
page boundary-aligned. This means the address should be 
aligned to a Word boundary (Ao = 0) for a 2-byte transfer, a 
double Word boundary (e.g. Ag = 0, A; = 0) for a 4-byte 
transfer, and so on. If the address supplied by the host is 
not page boundary-aligned, the SST49LFOOxC will force a 
boundary alignment, starting the multi-byte Read or Write 
operation from the lower byte of the addressed page. 
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Multiple Device Selection TABLE 7: FIRMWARE Memory MULTIPLE DEVICE 
SELECTION CONFIGURATION 





Multiple LPC firmware flash devices may be strapped to 





increase memory densities in a system. The four ID pins, Device # ID[3:0] IDSEL 
ID[3:0], allow up to 16 devices to be attached to the same 0 (Boot device) 0000 0000 
bus by using different ID strapping in a system. BIOS sup- { 0001 0001 





port, bus loading, or the attaching bridge may limit this num- 




















: : 2 0010 0010 
ber. The boot device must have an ID of 0000b (determined 3 TE TE 
by ID[3:0]); subsequent devices use incremental number- 
ing. Equal density must be used with multiple devices. 4 0100 0100 

5 0101 0101 
Multiple Device Selection for 6 0110 0110 
Firmware Memory Cycle 7 0114 0111 
For Firmware Memory Read/Write cycles, hardware strap- 8 1000 1000 


ping values on ID[3:0] must match the values in IDSEL 9 1001 1001 
field. The SST49LFOOxC will compare these bits with 
































; : . ; 10 1010 1010 
ID[3:0]’s strapping values. If there is a mismatch, the device 11 1014 1014 
will ignore the remainder of the cycle. See Table 7 for Multi- 
ple Device Selection Configuration. le 1100 1100 
13 1101 1101 
14 1110 1110 
15 1111 1111 
T7.0 1292 
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SST49LFO004C / SST49LFO008C Fs 
Advance Information 

DEVICE COMMANDS 

Device operation is controlled by commands written to the Reset operation the device enters Read mode. Commands 

Command User Interface (CUI). Execution of a specific consist of one or two sequential Bus-Write operations. The 

command is handled by internal functions after a CUl commands are summarized in Table 8, “Software Com- 

receives and processes the command. After power-up or a mand Sequence”. 


TABLE’ 8: SOFTWARE COMMAND SEQUENCE 


















































1. 
2. 


























Bus Cycles First Bus Cycle Second Bus Cycle 
Command Required Oper Addr! Data Oper Addr’ Data 
Read-Array/Reset 1 Write Xx FFH 
Read-Software-|ID/ >2 Write x 90H Read IAS ID§ 
Read-Security-ID23:4 
Read-Status-Register?* 2 Write xX 70H Read xX SRD’ 
Clear-Status-Register 1 Write X 50H 
Sector-Erase® 2 Write x 30H Write SAx? DOH 
Block-Erase® 2 Write X 20H Write BAx DOH 
Program®:10 2 Write xX 40H Write WA"! wop!?2 
or 

10H 
Program-/Erase-Suspend 1 Write X BOH 
Program-/Erase-Resume 1 Write X DOH 
User-Security-ID-Program'? 2 Write x A5H Write wa"! Data 
User-Security-ID-Program-Lockout 2 Write X 85H Write X 00H 
Protected-Area-Sector-Erase®'4 2 Write x 32H Write SA DOH 
Program-Protected-Area®:'4 2 Write x 42H Write WA Data 
Open-Protected-Area!® 1 Write x 62H 
Hide-Protected-Area'® 1 Write x 6DH 
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This value must be a valid address within the device Memory Address Space. X can be Vix or Vi, but no other value. 
SST Manufacturer's ID = BFH, is read with A1g-Ao = 0. 

SST49LF004C/008C Device ID = 54H/59H, is read with Ai9-Aj = 0, Ap = 1. 

Following the Read-Software-ID/Read-Security-ID command, 

Read operations access Manufacturer's ID and Device ID or Security ID. 


3. Read-Software-ID/Read Security ID and Read Status Register will return ID/Register data until another valid command is written. 


ONO . 


o 


10. 
11. 
12. 
13. 
14. 


15. 


. Following the Read-Software-ID/Read-Security-ID command, Read operations access manufacturer’s ID and Device ID or Security 


ID. Read-Software-ID/Read-Security-ID and Read-Status-Register will return register data until another valid command is written. 


. [A= Device Identification Address/Security ID Address. 

. ID = Data read from identifier codes/Data read from Security ID 

. SRD = Data read from Status register 

. The sector or block must not be write-locked when attempting Erase or Program operations. 


Attempts to issue an Erase or Program command to a write-locked sector/block will fail. 


. SAx for Sector-Erase Address 


BA x for Block-Erase Address 

The Program Command can operate on multiple bytes. 

WA = Address of memory location to be written 

WD = Data to be written at location WA 

Valid addresses for the User Security ID space are from FFFC 0188H to FFFC 019FH. 

Valid address WA of Protected Data Area location is from FFFC 8000H to FFFC AFFFH. For Sector Erase Command any address 
within the sector in the Protected Data Area being erased can be used: PDA Sector 0 - SA+ FFC 8000H to FFFC 8FFFH. PDA Sec- 
tor 1 - SA = FFFC 9000H to FFFC 9FFFH. PDA Sector 2 - SA = FFFC AOOOH to FFFC AFFFH. 

After Open Protected Area command is executed the contents of the area can be read at addresses FFBC 8000H to FFBC AFFFH if 
it is not read-locked. After Hide Protected Area command is executed the contents of the area is not accessible regardless of read- 
lock status. By default (after Power On or reset) Protected Data Area is hidden. 
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Read-Array Command 


Upon initial device power-up and after exit from reset, the 
device defaults to the Read Array mode. This operation can 
also be initiated by writing the Read-Array command. (See 
Table 8.) The device remains available for array reads until 
another command is written. Once an internal Prograrn/ 
Erase operation starts, the device will not recognize the 
Read-Array command until the operation is completed, 
unless the operation is suspended via a Program-/Erase- 
Suspend command. 


Read-Software-ID Command 


The Read-Software-ID operation is initiated by writing the 
Read-Software-ID command. Following the command, the 
device will output the manufacturer's ID and device ID from 
the addresses shown in Table 9. Any other valid command 
will terminate the Read-Software-ID operation. 


The Read-Software-ID command is the same as the Read- 
Security-ID command. See “Security ID Commands” on 
page 20. 


TABLE 10: SOFTWARE STATUS REGISTER 


4 Mbit / 8 Mbit LPC Serial Flash 
SST49LF004C / SST49LFO008C 


TABLE 9: PRODUCT IDENTIFICATION 























Address! Data 

Manufacturer's ID FFFC 0000H BFH 
Device ID 

SST49LF004C FFFC 0001H 54H 

SST49LFO08C FFFC 0001H 59H 
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1. Address shown in this column is for boot device only. 
Address locations should appear elsewhere in the 4 
GByte system memory map depending on ID strapping 
values on ID[3:0] pins when multiple LPC memory 
devices are used in a system. 


Read-Status-Register Command 


The Status register may be read to determine when a Sec- 
tor-/Block-Erase or Program completes, and whether the 
operation completed successfully. The Status register may 
be read at any time by writing the Read-Status-Register 
command. After writing this command, all subsequent 
Read operations will return data from the Status register 
until another valid command is written. 


The default value of the Status register after device power- 
up or reset is 80H. 


Clear-Status-Register Command 


The user can reset the Status registers Block Protect Sta- 
tus (BPS) bit to 0 by issuing a Clear-Status-Register com- 
mand. Device power-up and hardware reset will also reset 
BPS to 0. 





Bit | Name Function 





0 | RES Reserved for future use 





1 BPS Block Protect Status 


0: Block Unlocked 


The Block Write-Lock bit should be interrogated only after Erase or Program command is issued. 
It informs the system whether or not the selected block is locked. 
BPS does not provide a continuous indication of Write-Lock bit value. 


1: Operation Aborted, Block Write-Lock bit set. 





2:5 | RES Reserved for future use 





6 | ESS Erase Suspend Status 
0: Erase in progress/completed 


1: Erase suspended 





7 |WSMS | Write State Machine Status 


0: Busy 
1: Ready 











Check WSMS to determine erase or program completion. 
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Sector-/Block-Erase Command 


The Erase Command operates on one sector or block at a 
time. This command requires an (arbitrary) address within 
the sector or block to be erased. Note that a Sector/Block 
Erase operation changes all Sector/Block byte data to FFh. 
If a Read operation is performed after issuing the erase 
command, the device will automatically output Status Reg- 
ister data. The system can poll the Status Register in order 
to verify the completion of the Sector/Block Erase operation 
(please refer to Table 10, Status Register Definition). If a 
Sector/Block Erase is attempted on a locked block, the 
operation will fail and the data in the Sector/Block will not be 
changed. In this case, the Status Register will report the 
error (BPS=1). 


Program Command 


The Program command operates on multiple bytes as 
shown in Table 5. This command specifies the address and 
data to be programmed. During the Program operation the 
device automatically outputs the Status Register data when 
read. The system can poll the Status Register in order to 
verify the completion of the Program operation (refer to 
Table 10, “Software Status Register’). If a Program opera- 
tion is attempted on a locked block, the operation will fail 
and the data in the addressed byte will not be changed. In 
this case, the Status Register will report the error (BPS=1). 


Program-/Erase-Suspend or 
Program-/Erase-Resume Operations 


The Program-Suspend and Erase-Suspend operations 
share the same software command sequence (BOH). The 
Program-Resume and Erase-Resume operations share 
the same software command sequence (DOH). See Table 
8, “Software Command Sequence” on page 17. 
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Erase-Suspend/ 
Erase-Resume Commands 


The Erase Suspend command allows Sector-Erase or 
Block-Erase interruption in order to read or program data 
in another block of memory. Once the Erase-Suspend 
command is executed, the device will suspend any on- 
going Erase operation within time Tes (10 us). The device 
outputs status register data when read after the Erase- 
Suspend command is written. The system is able to deter- 
mine when the Erase operation has been completed 
(WSMS=1) by polling the status register. After an Erase- 
Suspend, the device will set the status register ESS bit 
(ESS=1) if the Erase has been successfully suspended 
(refer to Table 10, “Software Status Register’). The Erase- 
Resume command resumes the Erase operation that had 
been previously suspended. 


After a successful Erase-Suspend, a Read-Array com- 
mand may be written to read data from a Sector/Block 
other than the suspended Sector/Block. A Program com- 
mand sequence may also be issued during Erase Sus- 
pend to program data in memory locations other than the 
Sector/Block currently in the Erase-Suspend mode. If a 
Read-Array command is written to an address within the 
suspended Sector/Block this may result in reading invalid 
data. If a Program command is written to an address within 
the suspended Sector/Block the command is acknowl- 
edged but rejected. Other valid commands while erase is 
suspended include Read-Status-Register, Read-Device- 
ID, and Erase-Resume. 


The Erase-Resume command resumes the Erase process 
in the suspended sector or block. After the Erase-Resume 
command is written, the device will continue the Erase pro- 
cess. Erase cannot resume until any Program operation ini- 
tiated during Erase-Suspend has completed. Suspended 
operations cannot be nested: the system needs to com- 
plete or resume any previously suspended operation 
before a new operation can be suspended. See Figure 7 
for flowchart. 
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Program-Suspend/ 
Program-Resume Command 


The Program-Suspend and Program-Resume commands 
have no influence on the device. Since the device requires 
a maximum of Tsp (10 us) in order to program a byte (see 
Table 27), when a Program-Suspend command is written, 
the suspended Byte Program operation will always be suc- 
cessfully completed within the suspend latency time (Tes = 
Tsp = 10 ps). 


Security ID Commands 


The SST49LFOOxC device offers a 256-bit Security ID 
space. The Security ID space is divided into two parts. One 
64-bit segment is programmed at SST with a unique 64-bit 
number: this number cannot be changed by the user. The 
other segment is 192-bit wide and is left blank: this space is 
available for customers and can be programmed as 
desired. 


The User-Security-ID-Program command is shown in 
Table 8, “Software Command Sequence”. Use the memory 
addresses specified in Table 11 for Security ID program- 
ming. Once the customer segment is programmed, it can 
be locked to prevent any alteration. The User-Security-ID- 
Program-Lockout command is shown in Table 8, “Software 
Command Sequence”. 


In order to read the Security ID information, the user can 
issue a Read Security ID Command (90H) to the device. At 
this point the device enters the Read-Software-ID/Read- 
Security-ID mode. The Security ID information can be read 
at the memory addresses in Table 11. 


A Read-Array/Reset command (FFH) must then be issued 
to the device in order to exit the Read-Software-ID/Read- 
Security-ID mode and return to Read-Array mode. 


An alternate method to read the Security ID information is 
to read the Security ID registers located into the register 
space as described in the “Security ID Registers” section. 


TABLE 11: Security ID ADDRESSES 


4 Mbit / 8 Mbit LPC Serial Flash 
SST49LF004C / SST49LFO008C 








Erase Sector/Block 


Write BOH to any valid 
device memory address 











Erase-Suspend 
Command 





Write 70H to any valid 
device memory address 


Read Status Register 


Read-Status-Register 
Command 











No —( Erase Completed 


Write the Read-Array 
command to read from 
another Sector/Block 
or 
Write the Program 
command to program 
another Sector/Block 


No 





Yes 
Write DOH to any valid 
device memory address 


Erase-Resume 
Command 


1292 FC_Erase-Sus.0 





FIGURE 7: ERASE-SUSPEND FLOW CHART 








Address Range! 


Security ID Segment 


Size 





FFFC 0180 to FFFC 0187 
FFFC 0188 to FFFC 019F 








Factory-Programmed 
User-Programmed 





8 bytes — 64 bit 
24 bytes — 192 bit 








T11.0 1292 
1. Address shown is for boot device only. Address locations should appear elsewhere in the 4 GByte system memory map depending 
on ID strapping values on ID[3:0} pins according with multiple device selection mechanism. 
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4 Mbit / 8 Mbit LPC Serial Flash 
SST49LF004C / SST49LF008C 


REGISTERS 


There are five types of registers available on the 
SST49LFOOxC, the multi-byte Read/Write configuration 
registers, General Purpose Inputs registers, Block Locking 
registers, Security ID register, and the JEDEC ID registers. 
These registers appear at their respective address location 
in the 4 GByte system memory map. Unused register loca- 
tions will read as OOH. Any attempt to read or write any reg- 
ister during an internal Write operation will be ignored. 


Read or write access to the register during an internal Pro- 
gram/Erase operation will be completed as follows: 


e  Multi-byte Read/Write Configuration registers, 
General Purpose Inputs register, and Block Lock- 
ing registers can be accessed normally 

e Security ID register and the JEDEC ID registers 
can not be accessed (reading these registers will 
return unused register data OOH). 


Multi-Byte Read/Write Configuration Reg- 
isters (Firmware Memory Cycle) 


The multi-byte read/write configuration (MBR) registers are 
four 8-bit read-only registers located at addresses 
FFBC0005-FFBC0008 for boot configured device (see 
Table 13). These registers are accessible using Firmware 
Memory Read cycle only. These registers contain informa- 
tion about multi-byte read and write access sizes that will 
be accepted for Firmware Memory multi-byte Read com- 
mands. The registers are not available in AAl mode. 






® 


Advance Information 


In case of multi-byte Firmware Memory register reads, the 
device will return register data for the addressed register 
until the command finishes, or is aborted. 


General Purpose Inputs Register 


The General Purpose Inputs register (GPI_LREG) passes 
the state of GPI[4:0] pins on the SST49LFOOXC. It is rec- 
ommended that the GPI[4:0] pins be in the desired state 
before LFRAME# is brought low for the beginning of the 
bus cycle, and remain in that state until the end of the cycle. 
There is no default value since this is a pass-through regis- 
ter. The GPI_REG register for the boot device appears at 
FFBCO100H in the 4 GByte system memory map, and will 
appear elsewhere if the device is not the boot device (see 
Table 12). This register is not available to be read when the 
device is in an Erase/Program operation. In case of multi- 
byte Firmware Memory cycle register reads, the device will 
return register data for the addressed register until the com- 
mand finishes, or is aborted. 


TABLE 12: GENERAL PURPOSE REGISTER 























Default 
Register Register Address! Value | Access 
GPI_REG FFBC 0100H N/A R 
712.0 1292 


1. Address shown in this column is for boot device only. 
Address locations should appear elsewhere in the 4 
GByte system memory map depending on ID strapping 
values on ID[3:0] pins according with multiple device 
selection mechanism. 


TABLE 13: MULTI-BYTE READ/WRITE CONFIGURATION REGISTERS 


























Register Register Address’ Data Access | Description 

MULTI_BYTE_READ_L FFBC 0005H 0100 1011b R Device supports 1,2,4, 16, 128 Byte reads 
MULTI_BYTE_READ_H FFBC 0006H 0000 0000b R Future Expansion for Read 
MULTI_BYTE_WRITE_L FFBC 0007H 0000 0011b R Device supports 1, 2, 4 Byte Write 
MULTI_BYTE_WRITE_H FFBC 0008H 0000 0000b R Future Expansion for Write 











713.0 1292 


1. Address shown in this column is for boot device only. Address locations should appear elsewhere in the 4 GByte system memory 
map depending on ID strapping values on ID[3:0] pins when multiple LPC memory devices are used in a system. 


©200 Silicon Storage Technology, Inc. 


21 


$71292-00-000 1/06 
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4 Mbit / 8 Mbit LPC Serial Flash 
SST49LF004C / SST49LFO008C 





Advance Information 


Block and PDA Sector Locking Registers 


SST49LFOOxC provides software controlled lock protection 
through a set of Block Locking registers. The Block Locking 
registers are read/write registers and they are accessible 
through standard addressable memory locations specified 
in Table 14. Unused register locations will return OOH if 
read. 


In case of multi-byte register reads with Firmware Memory 
cycle, the device will return register data for the addressed 
register until the command finishes, or is aborted. 


TABLE 14: BLock LOCKING REGISTERS 


SST49LFOOxC also provides PDA Sector Locking Regis- 
ters at addresses shown in Table 15. These locking regis- 
ters can be accessed only after Open Protected Area 
command is executed. After Hide Protected Area com- 
mand, as well as after Power On and Reset, read from 
addresses specified in Table 15 returns unused register 
space data 00H, and write to these addresses is ignored. 


In case of multi-byte read of any locking register, the device 
will return register data for the addressed register until the 
command finishes, or is aborted. 






























































Block Protected Memory Address! Range Memory Map 
Register Size SST49LF004C SST49LF008C Register Address! 
T_BLOCK_LK 16K O7FFFFH-07CO00H OFFFFFH-OFCOOOH FFBFC002H 
T_MINUSO1_LK 8K 07BFFFH-07A000H OFBFFFH-OFAO00H FFBFA002H 
T_MINUSO2_LK 8K 079FFFH-078000H OF9FFFH-OF8000H FFBF8002H 
T_MINUSO3_LK 32K 077FFFH-070000H OF7FFFH-OFOO00H FFBFO002H 
T_MINUS04_LK 64K O6FFFFH-060000H OEFFFFH-OE0000H FFBE0002H 
T_MINUSO5_LK 64K O5FFFFH-050000H ODFFFFH-OD0000H FFBD0002H 
T_MINUSO6_LK 64K O04FFFFH-040000H OCFFFFH-OCO000H FFBC0002H 
T_MINUSO7_LK 64K O3FFFFH-030000H OBFFFFH-OB0000H FFBBO002H 
T_MINUSO8_LK 64K 02FFFFH-020000H OAFFFFH-OA0000H FFBA0002H 
T_MINUSO9_LK 64K 01FFFFH-010000H O9FFFFH-090000H FFB90002H 
T_MINUS10_LK 64K OOFFFFH-000000H O8FFFFH-080000H FFB80002H 
T_MINUS11_LK 64K 07FFFFH-070000H FFB70002H 
T_MINUS12_LK 64K O6FFFFH-060000H FFB60002H 
T_MINUS13_LK 64K O5FFFFH-050000H FFB50002H 
T_MINUS14_LK 64K 04FFFFH-040000H FFB40002H 
T_MINUS15_LK 64K O3FFFFH-030000H FFB30002H 
T_MINUS16_LK 64K 02FFFFH-020000H FFB20002H 
T_MINUS17_LK 64K 01FFFFH-010000H FFB10002H 
T_MINUS18_LK 64K OOFFFFH-000000H FFB00002H 








TABLE 15: PROTECTED DATA AREA SECTOR LOCKING REGISTERS 


714.0 1292 
1. Address shown in this column is for boot device only. Address locations should appear elsewhere in the 4 GByte system memory 
map depending on ID strapping values on ID[3:0] pins when multiple LPC memory devices are used in a system. 























Sector SST49LFOOxC PDA Protected Addresses! Memory Map 

Register Size For Write Access For Read Access Register Address! 
T_PDA2_LK 4K FFFC AOOOH-FFFC AFFFH FFBC AOOOH-FFBC AFFFH FFBC 2202H 
T_PDA1_LK 4K FFFC 9000H—-FFFC 9FFFH FFBC 9000H-FFBC 9FFFH FFBC 1202H 
T_PDAO_LK 4K FFFC 8000H—-FFFC 8FFFH FFBC 8000H-FFBC 8FFFH FFBC 0202H 














715.0 1292 


1. Address shown in this column is for boot device only. Address locations should appear elsewhere in the 4 GByte system memory 
map depending on ID strapping values on ID[3:0] pins when multiple LPC memory devices are used in a system. 
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4 Mbit / 8 Mbit LPC Serial Flash 
SST49LF004C / SST49LF008C 






® 


Advance Information 


TABLE 16: BLockK/PDA SECTOR LOCKING REGISTER BITS 






































Reserved Bit | Read-Lock Bit | Lock-Down Bit | Write-Lock Bit 
[7:3] [2] [1] [0] Lock Status 
00000 0 0 0 Full Access 
00000 0 0 1 Write Locked (Default State at Power-Up) 
00000 0 1 0 Locked Open (Full Access Locked Down) 
00000 0 1 1 Write Locked Down 
00000 1 0 0 Block Read Locked (Registers alterable) 
00000 1 0 1 Block Read & Write Lock (Registers alterable) 
00000 1 1 0 Block Read Locked Down (Registers not alterable) 
00000 1 1 1 Block Read & Write lock Down (Registers not alterable) 











Write-Lock Bit 


The Write-Lock bit, bit 0, controls the lock state described 
in Table 16. The default Write status of all blocks after 
power up is write locked. When bit 0 of the Block Locking 
register is set, Program and Erase operations for the corre- 
sponding block are prevented. Clearing the Write-Lock bit 
will unprotect the block. The Write-Lock bit must be cleared 
prior to starting a Program or Erase operation since it is 
sampled at the beginning of the operation. The Write-Lock 
bit functions in conjunction with the hardware Write Lock 
pin TBL# for the top Boot Block. When TBL+# is low, it over- 
rides the software locking scheme. The top Boot Block 
Locking register does not indicate the state of the TBL# 
pin. The Write-Lock bit functions in conjunction with the 
hardware WP#/AAI pin for the remaining blocks (Blocks 0 
to 17 for 49LFOO8C and Blocks 0 to 9 for 49LFO04C). 
When WP#/AAI is low, it overrides the software locking 
scheme. The Block Locking register does not indicate the 
state of the WP#/AAI pin. 
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Lock-Down Bit 


The Lock-Down bit, bit 1, controls the Block Locking regis- 
ter as described in Table 16. When in LPC interface mode, 
the default Lock Down status of all blocks upon power-up is 
not locked down. Once the Lock-Down bit is set, any future 
attempted changes to that Block Locking register will be 
ignored. The Lock-Down bit is only cleared upon a device 
reset with RST# or INIT# or power down. Current Lock 
Down status of a particular block can be determined by 
reading the corresponding Lock-Down bit. Once a block’s 
Lock-Down bit is set, the Read-Lock and Write-Lock bits for 
that block can no longer be modified: the block is locked 
down in its current state of read/write accessibility. 


Read-Lock Bit 


The default read status of all blocks upon power-up is read- 
unlocked. When a block’s read lock bit is set, data cannot 
be read from that block. An attempted read from a read- 
locked block will result in the data 00h. The read lock status 
can be unlocked by clearing the read lock bit: this can only 
be done provided that the block is not locked down. The 
current read lock status of a particular block can be deter- 
mined by reading the corresponding read-lock bit. 


$71292-00-000 1/06 
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® 


Advance Information 


Security ID Registers 


The SST49LFOxxC devices offer a 256-bit Security ID reg- 
ister space. The Security ID space is divided into two seg- 
ments - one (64 bits) factory programmed segment and 
one (192 bits) user programmed segment. The first seg- 
ment is programmed and locked at SST with a unique 64- 
bit number. The user segment (192-bits) is left blank (FFH) 
for the customer to be programmed as desired. The user 
can use standard Register read cycles to read the Security 
ID space, or use the Security ID Program command to pro- 
gram the space. Refer to Table 8, “Software Command 
Sequence” for more details. 


The Security ID Information and its Write Lock/Unlock sta- 
tus can be Read in the Register Access Space for Execute- 
In-Place (XIP) type of applications. (See Table 17.) 


TABLE 17: SEcurRITY ID REGISTERS 


4 Mbit / 8 Mbit LPC Serial Flash 
SST49LF004C / SST49LFO008C 


The Write Lock-out status of the Security ID space can be 
read from the SEC_ID_WRITE_LOCK register (see Table 
17). The SEC_ID_WRITE_LOCK register is a “read only” 
register that is accessible at the address location specified 
in Table 14. In the case of multi-byte register reads with 
Firmware Memory cycle, for SEC_ID_WRITE_LOCK reg- 
ister, the device will return register data for the addressed 
register until the command finishes, or is aborted. 


In the case of multi-byte register reads with Firmware Mem- 
ory cycle, for the all the SEC_ID_BYTE registers, the 
device will return page-aligned sequential register data with 
wrap-around until the command finishes, or is aborted. 









































Register Register Address’ Value Access_ | Description 
SEC_ID__WRITE_LOCK FFBC0102H 0000 0000b R Write Unlocked 

0000 0001b Write Locked 
SEC_ID_BYTE_0O FFBC0180H R Factory Programmed 
SEC_ID_BYTE_1 FFBC0181H R Factory Programmed 
SEC_ID_BYTE_2 FFBC0182H R Factory Programmed 
SEC_ID_BYTE_3 FFBC0183H R Factory Programmed 
SEC_ID_BYTE_7 FFBC0187H R Factory Programmed 
SEC_ID_BYTE_8 FFBC0188H R User Programmed 
SEC_ID_BYTE_9 FFBC0189H R User Programmed 
SEC_ID_BYTE_30 FFBC0O19EH R User Programmed 
SEC_ID_BYTE_31 FFBC0O19FH R User Programmed 

















717.0 1292 


1. Address shown in this column is for boot device only. Address locations should appear elsewhere in the 4GByte system memory 
map depending on ID strapping values on ID[3:0] pins according with multiple device selection mechanism. 


JEDEC ID Registers 


The JEDEC ID registers for the boot device appear at 
FFBCOOOOH and FFBCOO01H in the 4 GByte system 
memory map, and will appear elsewhere if the device is not 
the boot device. This register is not available to be read 
when the device is in Erase/Program operation. Unused 
register location will read as OOH. See Table 18 for the 
JEDEC device ID code. In case of multi-byte register reads 
with Firmware Memory cycle, the device will return register 
data for the addressed register until the command finishes, 
or is aborted. 
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TABLE 18: JEDEC ID REGISTERS 


























Register Default 
Register Address! | Value | Access 
MANUF_REG FFBC 0000H BFH R 
DEV_REG 
SST49LF004C FFBC 0001H 54H R 
SST49LFO08C FFBC 0001H 59H 





718.0 1292 
1. Address shown in this column is for boot device only. 
Address locations should appear elsewhere in the 4 
GByte system memory map depending on ID strapping 
values on ID[3:0] pins when multiple LPC memory 
devices are used in a system. 


$71292-00-000 1/06 


4 Mbit / 8 Mbit LPC Serial Flash 
SST49LF004C / SST49LF008C 


AUTO-ADDRESS INCREMENT (AAI) MODE 


AAI Mode with Multi-byte Programming 


AAI mode with multi-byte programming is provided for high- 
speed production programming. Auto-Address Increment 
mode requires only one address load for each 128-byte 
page of data. The Multi-Byte Programming feature allows 
simultaneous multi-byte programming. Note: The Security 
ID area and the Protected Data Area cannot be pro- 
grammed using AAI mode. 


Taking the WP#/AAI pin to the Supervoltage Vx enables 
the AAI mode. The AAI command is started as a normal 
Firmware Memory cycle. LD# should be low (Vj_) as long 
as data is being loaded into the device. In the MADDR field, 
the host may input any address within the 128-byte page to 
be programmed. The least significant seven bits of the 
address field will be ignored and the device will begin pro- 
gramming at the beginning of the 128-byte page (i.e., the 
address will be page-aligned). The device Ready/Busy sta- 
tus is output on the RY/BY# pin. 


Data is accepted until the internal buffer is full. At that point 
RY/BY# goes low (busy) to indicate that the internal buffer 
is full and cannot accept any more data. When the device 
is ready, RY/BY# pin goes high and indicates to the host 
that more data (the next group of bytes) can be accepted 
by the internal data buffer (see Table 19 and Figure 8). 


LD# is taken high by the host after loading the final byte(s) 
of the 128-byte page. the RY/BY# signal remains low until 
the completion of internal programming. After the comple- 
tion of programming, the part will go into idle mode and the 
RY/BY# will go high indicating that the AAI command has 
been completed (see Table 19). A subsequent AAI com- 
mand may be initiated to begin programming the next 128- 


byte page. 
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Advance Information 


Data will be accepted by the device as long as LD# is low 
and RY/BY# is high (until the last byte of the 128-byte page 
has been entered). For partial data-loads (i.e., less than 
128 Bytes), LD# may be taken high (ViH) to end the data 
loading. If LD# goes high before the full 128-byte page has 
been entered, the device will program the data which has 
been entered to that point, and then terminate the AAI 
page programming command. Any incompletely loaded 
data byte (nibble) will not be programmed. The device will 
signify completion of the command by driving RY/BY# high. 
Once RY/BY# goes high, LD# can be taken low to begin a 
new AAI programming operation at a different address 
location. 


The RY/BY# pin will stay low while internal programming 
completes. When the entire 128-byte page has been pro- 
grammed, the device will return to the idle mode and the 
RY/BY# pin will go high (Vj) to indicate the AAI command 
has been completed. 


TABLE 19: LD# INPUT AND RY/BY# STATUS IN 
AAI MoDE 

















LD# | RY/BY# | RY/BY# 
state | status | Flag indication 
L H Device is Ready, can accept more data 
until the last (128") byte. 
L Device is Busy, cannot accept more data 
L H Device is Ready for next operation if 
previous data is the last (128"") byte. 
H H Device is Ready for next operation 
H L Device is Busy programming 














T19.0 1292 


The user may terminate AAI programming by dropping the 
WP#/AAI pin to TTL levels (ViH/ViL) as long as LD# is high 
and RY/BY# returns to high indicating the completion of the 
AAI cycle. Software block-locking will be disabled in AAI 
mode (all blocks will be write-unlocked). If AAl drops below 
the Supervoltage VH before RY/BY# returns to high (and 
LD# high), the contents of the page may be indeterminate. 


$71292-00-000 1/06 






4 Mbit / 8 Mbit LPC Serial Flash 
° SST49LF004C / SST49LFO008C 


Advance Information 


AAI Data Load Protocol 





TABLE 20: AAI PROGRAMMING CYCLE (INITIATED WITH WP#/AAI AT Vy ONLY) 


Clock Cycle | Field Name Field Contents LAD[3:0] Commenis 


1 START 1110 IN LFRAME# must be active (low) for the part to respond. 
Only the last start field (before LFRAME# transitions 
high) should be recognized. The START field contents 
indicate a Firmware Memory Write cycle. (1110b) 

2 IDSEL 0000b to 1111b IN ID works identically to Firmware Memory cycle. 

This field indicates which SST49LFOOxC device should 
respond. If the IDSEL (ID select) field matches the 
value of ID[3:0], then that particular device will 
respond to the whole bus cycle. 

3-9 MADDR YYYY IN These seven clock cycles make up the 28-bit memory 
address. YYYY is one nibble of the entire address. 
Addresses are transferred most-significant nibble first. 
Only bits [19:7] for 8M, [18.7] for 4M of the total 
address [27:0] are used for AAI mode. The rest are 

















“don’t care”. 
10 MSIZE KKKK IN MSIZE field is don’t care when in AAI mode 
11-266 DATA ZZZZ IN Data is transmitted to the device least significant nib- 


ble first, from byte 0 to byte 127 as long as the RY/BY# 
is high and LD# low. The host will pause the clock and 
data stream when RY/BY# goes low until it returns 
high, signifying that the chip is ready for more data 
T20.0 1292 


























(Data Strobe Input) 


§ §——— § § ——— § § ——— § § ————_— §| § 
LFRAME# | 
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FIGURE 8: AAI Load Protocol Waveform 
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4 Mbit / 8 Mbit LPC Serial Flash 
SST49LF004C / SST49LF008C ° 


Advance Information 
ELECTRICAL SPECIFICATIONS 


The AC and DC specifications for the LPC interface signals (LAD[3:0], LFRAME#, LCLCK and RST#) as defined in Section 
4.2.2.4 of the PCI local Bus specification, Rev. 2.1. Refer to Table 21 for the DC voltage and current specifications. Refer to 
Table 25 through Table 27 for the AC timing specifications for Clock, Read, Write, and Reset operations. 


Absolute Maximum Stress Ratings (Applied conditions greater than those listed under “Absolute Maximum 
Stress Ratings” may cause permanent damage to the device. This is a stress rating only and functional operation 
of the device at these conditions or conditions greater than those defined in the operational sections of this data 
sheet is not implied. Exposure to absolute maximum stress rating conditions may affect device reliability.) 


Temperature: Under: BiaS: sic dn owe gee aia eRe eek he wee a Pee ee ged eee -55°C to +125°C 
Storage Tempeératures...:c2c.:aecence¢eenr inne igaea biadievegt dasenaeresaaed haere -65°C to +150°C 
D.C. Voltage on Any Pin to Ground Potential.............. 000000 e eee eee -0.5V to Vpp+0.5V 
Transient Voltage (<20 ns) on Any Pin (except WP#/AAI) to Ground Potential! .............. -2.0V to Vpp+2.0V 
Voltage on WP#/AAI Pin to Ground Potential?..... 20.0... ccc eee eens -0.5V to 11.0V 
Package Power Dissipation Capability (Ta=25°C) .. 0... eee eee 1.0W 
Surface Mount Solder Reflow Temperature? ..... 2... cece eee eee eae 260°C for 10 seconds 
Outout SHO Circuit Curent: .4-2:6a 5: fae Sees ak tie enh Guan Realy Siam da aidan Sm Adu BOR wes 50 mA 


1. Do not violate processor or chipset specification regarding INIT# voltage. 
2. The maximum DC voltage on WP#/AAI pin may reach 11V for periods <20ns. 
3. Excluding certain with-Pb 32-PLCC units, all packages are 260°C capable in both non-Pb and with-Pb solder versions. 
Certain with-Pb 32-PLCC package types are capable of 240°C for 10 seconds; please consult the factory for the latest information. 
4. Outputs shorted for no more than one second. No more than one output shorted at a time. 


OPERATING RANGE 





Range Ambient Temp Vpp 
Commercial 0°C to +85°C 3.0-3.6V 




















AC CONDITIONS OF TEST 


Input Rise/Fall Time............... 3ns 
Output Load.................00-. C. = 30 pF 
See Figure 14 
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4 Mbit / 8 Mbit LPC Serial Flash 
° SST49LF004C / SST49LFO008C 


Advance Information 





DC Characteristics 


TABLE 21: DC OPERATING CHARACTERISTICS (ALL INTERFACES) 











Limits 
Symbol | Parameter Min Max Units | Test Conditions 
Ipp! Active Vpp Current LCLK (LPC mode)=V\L7/Vint at f=33 MHz 
All other inputs=Vj_ or Vin 
Read 18 mA _ | All outputs = open, Vpp=Vpp Max 
Single-/Dual-Byte Program, Erase 40 mA_ | f=383 MHz 
Quad-Byte Program 60 mA_ | f=33 MHz 
Isp Standby Vpp Current 100 yA | LCLK (LPC mode)=ViL7/VinT at f=33 MHz 
(LPC Interface) LFRAME#=.9Vpp, f=33 MHz, 


Vpp=Vpp Max 

All other inputs > 0.9 Vpp or < 0.1 Vpp 
IRy? Ready Mode Vpp Current 10 mA | LCLK (LPC mode)=Vi:1/Vint at f=33 MHz 

LFRAME#=V\L, f=33 MHz, Vpp=Vpp Max 

All other inputs = 0.9 Vpp or < 0.1 Vpp 


ly Input Leakage Current for ID[3:0] pins 200 WA | Vin=GND to Vpp, Vop=Vpp Max 












































lu Input Leakage Current 1 HA | Vin=GND to Vpp, Vpp=Vpp Max 
ILo Output Leakage Current 1 HA | Vout=GND to Vpp, Vpp=Vpp Max 
ly Supervoltage Current for WP#/AAI 200 pA 
VH Supervoltage for WP#/AAI 8.5 9.5 V 
Vine INIT# Input High Voltage 1.1 Vpp+0.5 V Vpp=Vpp Max 
Vie INIT# Input Low Voltage -0.5 0.4 V Vpp=Vpp Min 
ViL Input Low Voltage -0.5 0.3 Vpp V Vpp=Vpp Min 
Vin Input High Voltage 0.5 Vpp | Vpp+0.5 V Vpp=Vpp Max 
VoL Output Low Voltage 0.1 Vpp V loL=1500 YA, Vop=Vpp Min 
Vou Output High Voltage 0.9 Vpp V loH=-500 HA, Vpp=Vpp Min 
T21.0 1292 
1. Ipp active while a Read or Write (Program or Erase) operation is in progress. 
2. The device is in Ready mode when no activity is on the LPC bus. 
3. Do not violate processor or chipset specification regarding INIT# voltage. 
TABLE 22: RECOMMENDED SYSTEM POWER-UP TIMINGS 
Symbol Parameter Minimum Units 
Tpu-READ! Power-up to Read Operation 100 us 
Tpu-write! Power-up to Write Operation 100 us 




















722.0 1292 
1. This parameter is measured only for initial qualification and after a design or process change that could affect this parameter 


TABLE 23: PIN CAPACITANCE (Vpp=3.3V, Ta=25 °C, f=1 Mhz, other pins open) 








Parameter Description Test Condition Maximum 
Cryo! I/O Pin Capacitance Vio=0V 12 pF 
Cin! Input Capacitance Vin=0V 12 pF 
Lpin2 Pin Inductance 20 nH 

















723.0 1292 
1. This parameter is measured only for initial qualification and after a design or process change that could affect this parameter. 
2. Refer to PCI spec. 
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TABLE 24: RELIABILITY CHARACTERISTICS 


Advance Information 


















































Minimum 

Symbol Parameter Specification Units Test Method 
Nenp! Endurance 10,000 Cycles JEDEC Standard A117 
Tor! Data Retention 100 Years JEDEC Standard A103 
lity! Latch Up 100 + Ipp mA JEDEC Standard 78 

724.0 1292 

1. This parameter is measured only for initial qualification and after a design or process change that could affect this parameter. 
TABLE 25: CLock TIMING PARAMETERS (LPC MODE) 

Symbol Parameter Min Max Units 
Toye Cycle Time 30 ns 
THIGH LCLK High Time 11 ns 
TLow LCLK Low Time 11 ns 
- LCLK Slew Rate (peak-to-peak) 1 4 V/ns 
- RST# or INIT# Slew Rate 50 mV/ns 

T25.0 1292 








Tcyc 





0.4 Vpp p-to-p 
(minimum) 


1292 F09.0 








FIGURE 9: LCLK WAVEFORM (LPC MoDeE) 
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Advance Information 


TABLE 26: RESET TIMING PARAMETERS, Vpp=3.0-3.6V (LPC MODE) 









































1. There will be a latency due to Trste if a reset procedure is performed during a Program or Erase operation, 


RstwinT# ff SS 


wooo /XXXXXXXK 
wrnawer — /KXXXKKXX I 





_@RSTF_,| 







Sector-/Block-Erase 
or Program operation 


1292 F10.0 


Symbol Parameter Min Max Units 
Tprst Vpp stable to Reset High 100 Us 
Trstp RST# Pulse Width 100 ns 
TRSTF RST# Low to Output Float 48 ns 
Trst! RST# High to LFRAME# Low 5 LCLK cycles 
TRSTE RST# Low to reset during Sector-/Block-Erase or Program 10 ys 
T26.0 1292 








FIGURE 10: RESET TIMING DIAGRAM (LPC MODE) 
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AC Characteristics 


TABLE 27: READ/WRITE CYCLE TIMING PARAMETERS, Vpp=3.0-3.6V (LPC MobDE) 


Advance Information 












































Symbol Parameter Min Max Units 
Teyc Clock Cycle Time 30 ns 
Tsu Data Set Up Time to Clock Rising 7 ns 
Tou Clock Rising to Data Hold Time 0 ns 
Tvat! Clock Rising to Data Valid 2 11 ns 
Tap Byte Programming Time 10 Us 
Tse Sector-Erase Time 25 ms 
TBE Block-Erase Time 25 ms 
Tes Program/Erase-Suspend Latency 10 Us 
Ton Clock Rising to Active (Float to Active Delay) 2 ns 
Torr Clock Rising to Inactive (Active to Float Delay) 28 ns 
T27.0 1292 
1. Minimum and maximum times have different loads. See PCI spec 
TABLE 28: AC INPUT/OUTPUT SPECIFICATIONS (LPC MODE) 
Symbol Parameter Min Max Units | Conditions 
loH(AC) Switching Current High -12 Vpp mA 0 < Vout < 0.3Vpp 
-17.1 (Vpp-VouT) mA 0.3Vpp < Vout < 0.9Vpp 
Equation C! 0.7Vpp < Vout < Vpp 
(Test Point) -32 Vpp mA Vout = 0.7Vpp 
loL(AC) Switching Current Low 16 Vpp Equation D! mA Vpp >Vout = 0.6Vpp 
26.7 Vout mA 0.6Vpp > Vout > 0.1Vpp 
0.18Vpp > Vout > 0 
(Test Point) 38 Vpp mA Vout = 0.18Vpp 
Io Low Clamp Current -25+(Vin+1)/0.015 mA -3.< Vin <1 
Ion High Clamp Current 25+(Vin-Vpp-1)/0.015 mA Vpp+4 > Vin = Vpp+1 
slewr? Output Rise Slew Rate 1 4 V/ns 0.2Vpp-0.6Vpp load 
slewf? Output Fall Slew Rate 1 4 V/ns 0.6Vpp-0.2Vpp load 


























728.0 1292 
1. See PCI spec. 
2. PCI specification output load is used. 
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Advance Information 








LCLK 


LAD [3:0] 
(Valid Output Data) 


LAD [3:0] 
(Float Output Data) 





1292 F11.0 











FIGURE 11: OUTPUT TIMING PARAMETERS (LPC MODE) 





LCLK 


LAD [3:0] 
(Valid Input Data) 





























1292 F12.0 
FIGURE 12: INPUT TIMING PARAMETERS (LPC MODE) 
TABLE 29: INTERFACE MEASUREMENT CONDITION PARAMETERS (LPC MODE) 
Symbol Value Units 
Vr! 2 0.6 Vpp V 
Vr 0.2 Vpp V 
Vest 0.4 Vpop V 
Vuax! 2 0.4 Vpp V 
Input Signal Edge Rate 1 V/ns 

















729.0 1292 
1. The input test environment is done with 0.1 Vpp of overdrive over Viy and Vi_. Timing parameters must be met with no more over- 
drive than this. Vax specifies the maximum peak-to-peak waveform allowed for measuring input timing. Production testing may use 
different voltage values, but must correlate results back to these parameters. 
2. In the case of multi-byte read, Vt_ = 0.1 Vpp and VtH = 0.9Vpp 
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Advance Information 





VAD cceece 


§ §——— § § ——— § § ——— § § ——___ 
WP#/AAI / 


LCLK 


LAD [3:0] 
(Valid Input Data) 


LD# 





RY/BY# 1292 F13.0 








FIGURE 13: INPUT TIMING PARAMETERS (AAI MODE) 


TABLE 30: INPUT CYCLE TIMING PARAMETERS, Vpp=3.0-3.6V (AAI MoDE) 





























Symbol Parameter Min Max Units 
Tacyc Clock Cycle Time 135 ns 
Tasu Data Set Up Time to Clock Rising 25 ns 
TaDH Clock Rising to Data Hold Time 25 ns 
TRB RY/BY# LD# Falling 25 ns 
TLpsu LD# Set Up Time 25 ns 
TLDDH LD# Hold Time 25 ns 
T30.0 1292 
TO TESTER 


TO DUT = | 
CL 
1292 F15.0 ae 











FIGURE 14: A Test LOAD EXAMPLE 
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Advance Information 


PRODUCT ORDERING INFORMATION 


SST49LF 008C_ - 33 - 4C - WHE 
SST49LF xxxC - XXX - XX - XXX 


























4 Mbit / 8 Mbit LPC Serial Flash 
SST49LF004C / SST49LFO008C 


-_______Fnvironmental Attribute 


E' = non-Pb 


'————— Package Modifier 


H = 32 leads 


Package Type 
N = PLCC 
W = TSOP (type 1, die up, 8mm x 14mm) 








Temperature Range 
C = Commercial = 0°C to +85°C 








Minimum Endurance 
4 = 10,000 cycles 

















Valid combinations for SST49LF004C 


SST49LF004C-33-4C-NHE SST49LF004C-33-4C-WHE 


Valid combinations for SST49LFO008C 


SST49LF008C-33-4C-NHE SST49LFO008C-33-4C-WHE 


Operating Frequency 
33 = 33 MHz 
Device Density 
008 = 8 Mbit 
004 = 4 Mbit 
Voltage 
L = 3.0-3.6V 


Product Series 
49 = LPC Serial Flash 





1. Environmental suffix “E” denotes non-Pb solder. 
SST non-Pb solder devices are “RoHS Compliant”. 


Note: Valid combinations are those products in mass production or will be in mass production. Consult your SST sales 
representative to confirm availability of valid combinations and to determine availability of new combinations. 
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PACKAGING DIAGRAMS 
































TOP VIEW 
495 
485 
Optional 453 
Pin #1 : 
if .048 
Identifier ‘O40 > 
r 
042 U 
0484 
595 .553 
585 .547 
{—_!—_ LILI LI LW Ww 
.050 
BSC 


SIDE VIEW 
112 
106 
.029 .040 





400 .530 
BSC .490 








.015 Min. 


Note: 1.Complies with JEDEC publication 95 MS-016 AE dimensions, although some dimensions may be more stringent. 
2. All linear dimensions are in inches (max/min). 
3. Dimensions do not include mold flash. Maximum allowable mold flash is .008 inches. 


Advance Information 


BOTTOM VIEW 






































































































































UU LMU 































































































032 
.026 








4. Coplanarity: 4 mils. serplec-NiS 
32-LEAD PLASTIC LEAD CHIP CARRIER (PLCC) 
SST PACKAGE CODE: NH 
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Advance Information 





Pin # 1 Identifier 





12.50 
12.30 





rad sy DETAIL 


> ee es i ee 
0.50 14.20 





13.80 


a 
ie ae 
0.70 














0.50 
Note: 1.Complies with JEDEC publication 95 MO-142 BA dimensions, 
although some dimensions may be more stringent. | 

2. All linear dimensions are in millimeters (max/min). 1mm 32-tsop-WH-7 
3. Coplanarity: 0.1 mm 
4.Maximum allowable mold flash is 0.15 mm at the package ends, and 0.25 mm between leads. 

32-LEAD THIN SMALL OUTLINE PACKAGE (TSOP) 8mm x 14mm 

SST PACKAGE CoDE: WH 

TABLE 31: REVISION HISTORY 
Revision Description Date 
00 e Initial release of data sheet Jan 2006 

















Silicon Storage Technology, Inc. * 1171 Sonora Court * Sunnyvale, CA 94086 * Telephone 408-735-9110 * Fax 408-735-9036 
www.SuperFlash.com or www.sst.com 


©200 Silicon Storage Technology, Inc. $71292-00-000 1/06 


36 


